Data Protection – Fair Processing Notice

Personal Information
We collect and use personal information about you so that we can provide you with a policy that suits
your insurance needs. This notice explains the most important aspects of how we use your
information but you can get more information about the terms we use and view our full privacy policy
at https://www.quotemehappy.com/privacy-policy or request a copy by writing to us at Aviva,
Freepost, Mailing Exclusion Team, Unit 5, Wanlip Road Ind Est, Syston, Leicester LE7 1PD.

The data controller responsible for this personal information is Aviva Insurance Limited as the insurer
of the product. Additional controllers include your intermediary Aviva UK Digital Limited, who are
responsible for the sale and distribution of the product and any applicable reinsurers.

Personal information we collect and how we use it

We will use personal information collected from you and obtained from other sources:

 to provide you with insurance: we need this to decide if we can offer insurance to you and if so on
what terms and also to administer your policy, handle any claims and manage any renewal
 to support legitimate interests that we have as a business:
o we need this to manage arrangements we have with reinsurers, for the detection and
prevention of fraud
o We also use personal information about you to help us better understand our
customers and improve our customer engagement. This includes profiling and
customer analytics which allows us to make certain predictions and assumptions
about your interests, make correlations about our customers to improve our products
and to suggest other products which may be relevant or of interest to customers,
which includes marketing products and services to you ,
 to meet any applicable legal or regulatory obligations: we need this to meet compliance
requirements with our regulators (e.g. Financial Conduct Authority), to comply with law
enforcement and to manage legal claims, and
 to carry out other activities that are in the public interest: for example we may need to use personal
information to carry out anti-money laundering checks.

As well as collecting personal information about you, we may also use personal information about
other people, for example family members you wish to insure on a policy. If you are providing
information about another person we expect you to ensure that they know you are dong so and are
content with their information being provided to us. You might find it helpful to show them this privacy
notice and if they have any concerns please contact us in one of the ways described below.

The personal information we collect and use will include name, address and date of birth, financial
information and details of your home. If a claim is made we will also collect personal information about
the claim from you and any relevant third parties. We may also need to ask for details relating to the
health or any unspent offences or criminal convictions of you or somebody else covered under your
policy. We recognise that information about health and offences or criminal convictions is particularly
sensitive information. Where appropriate, we will ask for consent to collect and use this information.

If we need consent to use personal information for a specific reason, we will make this clear to you
when you complete an application or submit a claim. If you give us consent to using personal
information, you are free to withdraw this at any time by contacting us – refer to the “Contacting us”
details below. Please note that if consent to use this information is withdrawn we will not be able to
continue to process the information you gave us for this/these purposes(s). This would not affect our
use of the information where consent is not required.

Of course, you don’t have to provide us with any personal information, but if you don’t provide the
information we need we may not be able to proceed with your application or any claim you make.

Some of the information we use as part of this application may be provided to us by a third party. This
may include information already held about you and your home and within the Aviva group, including
details from previous quotes and claims, information we obtain from publicly available records, our
trusted third parties and from industry databases, including fraud prevention agencies and databases.

Databases we use for Underwriting and Fraud Prevention and Detection purposes
We may use your information to allow us to detect and prevent fraudulent applications and claims. For
details relating to information held about you on the Claims Underwriting and Exchange Register and
Motor Insurance Anti-Fraud and Theft Register please visit www.insurancedatabases.co.uk.

For details relating to information held about you by the Driver and Vehicle Licensing Agency (DVLA)
please visit www.dvla.gov.uk

How your data is used and shared by Insurers and Databases in relation to motor insurance

The data you provide will be used by us and shared with other insurers as well as certain statutory
and other authorised bodies for:

 Insurance underwriting purposes i.e. to examine the potential risk in relation to your (and/or a
third party’s) prospective policy so that we can:
 Consider whether to accept the relevant risk,
 Make decisions about the provision and administration of insurance and related services
for you (and members of your household),
 Validate your (or any person or property likely to be involved in the policy or claim) claims
history (at any time including upon application for insurance, in the event of an accident or
a claim, or at a time of renewal).

 Management Information purposes. To analyse insurance and other markets for the purposes
of:
 Portfolio assessment,
 Risk assessment,
 Performance reporting,
 Management reporting.

 Anti-fraud purposes.

To detect and prevent fraudulent claims and/or activities by:

 Sharing information about you with other organisations and public bodies including the
police,
 Tracing debtors or beneficiaries, recovering debt, managing your accounts and/or
insurance policies,
 Undertaking fraud searches. Insurers pass information to fraud prevention agencies and
databases including the Claims Underwriting and Exchange Register and where
appropriate the Motor Insurance anti-Fraud and Theft Register by Insurance Database
Services Limited (IDSL). This helps insurers check information and prevent fraudulent
claims. When we deal with your request for insurance we may search these registers.

 Compliance with legal obligations and responsibilities.

 Claims management – In the event of a claim we may need to disclose information with
any other party involved in that claim such as third parties involved in the incident, their
insurer, solicitor or representative and medical teams, the police or other investigators. We
also may have to investigate your claims and conviction history.
 Complaints management – If you make a complaint about the service we have provided,
we may be obliged to forward details about your complaints, including your personal
information, to the relevant ombudsman.
 Information about your insurance policy will be added to the Motor Insurance Database
(MID) managed by the Motor Insurers’ Bureau (MIB). MID and the data stored on it may be
used by certain statutory and/or authorised bodies including the police, the DVLA, the
DVLNI, the Insurance Fraud Bureau and other bodies permitted by law. This information
may be used for purposes permitted by law, which include but are not limited to:
  Electronic Licensing
 Continuous insurance enforcement
 Law enforcement (prevention, detection, apprehension and/or prosecution of
offenders)
 The provision of government services and/or other services aimed at reducing the
level and incidence of uninsured driving.

If you are involved in a road traffic accident (either in the UK, the European Economic Area or
certain other territories), insurers and/or the MIB may search the MID to obtain relevant
information.

Persons (including his or her appointed representative) pursuing a claim in respect of a road
traffic accident (including citizens of other countries) may also obtain relevant information
which is held on the MID. It is vital that the MID holds your current registration number. If it is
incorrectly shown on the MID you are at risk of having your vehicle seized by the police.

You can check that your current registration number details are shown on the MID at
www.askmid.com.

How your data will be processed

 Information which is supplied to fraud prevention agencies and databases such a IDSL and
MID can include details such as your name, address and date of birth together with details of
any injury arising from a claim.
 Your data may be supplied to databases in order to facilitate automatic no claim discount
validation checks.
 Your data may be transferred to any country, including countries outside of the European
Economic Area, for any of the purposes mentioned above.
 Under your policy you must tell us about any incident (such as an accident or theft) which
may or may not give rise to a claim. When you tell us about an incident, we will pass
information relating to it to the fraud prevention agencies and databases such as IDSL.

You can ask for more information about this. If you require such information, please contact
Aviva Insurance Limited.

How we use your data - Driving Licence Number

Insurance underwriting purposes i.e. to examine the potential risk in relation to your (and/or a third
party’s) prospective policy so that we can:

 Provide your (or any person included on the proposal) Driving Licence Number (DLN) to the
DVLA to confirm your (or the relevant person included on the proposal) licence status,
entitlement and relevant restriction information and endorsement/conviction data. Searches
may be carried out prior to the date of the insurance policy and at any point throughout the
duration of your insurance policy including at the mid-term adjustment and renewal stage. A
search of the DLN with the DVLA should not show a footprint against your (or another
relevant person included on the proposal) driving licence.
 Searches may be carried out at point of quote and, if an insurance policy is incepted, at
renewal stage.

Please note that if you give us false or inaccurate information it may invalidate your insurance
policy/prospective insurance policy or it could affect the amount we pay to settle any claims you make
under the policy.

Credit Searches
To ensure we have the necessary facts to assess your insurance risk, verify your identity, help
prevent fraud and provide you with our best premium and payment options, we may need to obtain
information relating to you at quotation, renewal and in certain circumstances where policy
amendments are requested. We or our agents may:
 undertake checks against publicly available information (such as electoral roll, country court
judgments, bankruptcy orders or repossessions(s). Similar checks may be made when assessing
claims,
 carry out a quotation search from a credit reference agency (CRA) which will appear on your credit
report and be visible to other credit providers. It will be clear that this is a quotation search rather
than a credit application.

Where you agree to pay monthly under an Aviva credit agreement, the status of your quotation search
from our credit reference agency (CRA) will be updated to reflect your credit application and this will
be visible to other credit providers. CRA’s may keep a record of this search.

In order to assess your application we will supply your personal information to our CRA and they will
give us information about you, such as about your financial history. We do this to assess
creditworthiness and product suitability, check your identity, manage your account, trace and recover
debts and prevent criminal activity. We will also continue to exchange information about you with
CRA’s on an ongoing basis, including about your settled accounts and any debts not fully repaid on
time. CRA’s will share your information with other organisations. Your data will also be linked to the
data of your spouse, any joint applicants or other financial associates.

The identity of our CRA and the ways in which they use and share personal information, are
explained in more detail at www.callcredit.co.uk/crain.

Automated decision making - Home

We carry out automated decision making to decide whether we can provide insurance to you and on
what terms. In particular, we use an automated underwriting engine to process the personal
information you provide as part of this application process. This will include information such as your,
age, , as well as details of your property including address and postcode. The automated engine
may validate the information you provide against other records we hold about you in our systems and
third party databases, including public databases. We may also supplement the information you
provide us with information from third parties who can provide more information about your property
(for example through land registers and commercially available property databases). We do this to
calculate the insurance risk and how much the cover will cost you. Without this information we are
unable to provide a price that is relevant to your individual circumstances and needs. We regularly
check the way our underwriting engine works to ensure we are being fair to our customers. After the
automatic decision has been made, you have the right to speak to someone from Aviva who may
review the decision and provide a more detailed explanation. If you wish to invoke this right please
contact us at dataprt@aviva.com or email us at https://help.quotemehappy.com/

On-line information

When you visit one of our websites, we may record information about your computer or mobile device,
including hardware and software used, general location, when and how you interact with our
websites. This information is used to note your interest in our websites, improve customer journeys,
determine pricing and/or offer you available discounts.

How we share your personal information with others

We may share your personal information:

 with the Aviva group, our agents and third parties who provide services to us, and other insurers
(either directly or via those acting for the insurer such as loss adjusters or investigators) to help us
administer our products and services,
 with regulatory bodies and law enforcement bodies, including the police, e.g. if we are required to
do so to comply with a relevant legal or regulatory obligation,
 with other organisations including insurers, public bodies and the police (either directly or using
shared databases) for fraud prevention and detection purposes,
 with reinsurers who provide reinsurance services to Aviva and for each other. Reinsurers will use
your data to decide whether to provide reinsurance cover, assess and deal with reinsurance claims
 and to meet legal obligations. They will keep your data for the period necessary for these purposes
and may need to disclose it to other companies within their group, their agents and third party
service providers, law enforcement and regulatory bodies.

Some of the organisations we share information with may be located outside of the European
Economic Area (“EEA”). We’ll always take steps to ensure that any transfer of information outside of
Europe is carefully managed to protect your privacy rights. For more information on this please see
our Privacy Policy or contact us.

Marketing
We also use personal information we hold about you across the Aviva Group to help us identify and
tailor products and services that may be of interest to you. We will only communicate with you in
accordance with any marketing preferences you have provided to us. We will continue to do this after
your policy has ended.

If you wish to amend your marketing preferences, change how you would like us to communicate with
you or tell us to stop marketing to you, you can do so in the following ways:

 Update in your My account

 Email us at https://help.quotemehappy.com/

How long we keep your personal information for

We maintain a retention policy to ensure we only keep personal information for as long as we
reasonably need it for the purposes explained in this notice. We need to keep information for the
period necessary to administer your insurance and deal with claims and queries on your policy. We
may also need to keep information after our relationship with you has ended, for example to ensure
we have an accurate record in the event of any complaints or challenges, carry out relevant fraud
checks, or where we are required to do so for legal, regulatory or tax purposes. We will also use this
information for marketing purposes.

Your rights
You have various rights in relation to your personal information, including the right to request access
to your personal information, correct any mistakes on our records, erase or restrict records where they
are no longer required, object to use of personal information based on legitimate business interests
including profiling and marketing, ask not to be subject to automated decision making if the decision
produces legal or other significant effects on you, and data portability. For more details in relation to
your rights, including how to exercise them, please see our full privacy policy or contact us – refer to
the “Contacting us” details below.

Contacting us
If you have any questions about how we use personal information, or if you want to exercise your
rights stated above, please contact our Data Protection team by either emailing them at
dataprt@aviva.com or writing to the Data Protection Officer, Level 4, Pitheavlis, Perth PH2 0NH.

If you have a complaint or concern about how we use your personal information, please contact us in
the first instance and we will attempt to resolve the issue as soon as possible. You also have the right
to lodge a complaint with the Information Commissioners Office at any time.